Who we are
Berman Digital Ltd, an Ontario, Canada company, operates Chart Kit. This policy explains how we collect, use, disclose, retain, and protect personal information for Chart Kit websites, documentation, checkout flows, support, free packages, paid Chart Kit Pro products, license certificate services, and related communications.
For privacy requests, contact[email protected]. For legal questions, contact [email protected].
Summary
- We use Google Analytics on ChartKit.io.
- We use Cloudflare for hosting, CDN, Workers, D1, R2, queues, email delivery, security, and operational logs.
- We use Polar for checkout, payments, subscriptions, customer records, receipts, refunds, and license-key data.
- We store customer and license certificate records in Cloudflare D1 and store generated license certificate PDFs in Cloudflare R2.
- We do not currently sell personal information, run ads, or run retargeting.
- We do not intentionally disclose personal information for cross-context behavioral advertising.
- We do not currently operate a newsletter, but may add product or marketing emails later with appropriate opt-out controls.
- Chart Kit is not directed to children.
Information we collect
Information you provide
- Contact details, such as name, email address, company name, and message contents when you contact support, sales, legal, or privacy addresses.
- Support context, such as screenshots, logs, code snippets, repositories, package versions, device details, or attachments you choose to send.
- Purchase and license details supplied through checkout, order forms, or support follow-up.
- Future email preferences if we add newsletter, product update, or marketing subscriptions.
Payment and checkout information
Polar handles self-serve checkout and payment processing. We receive or store limited purchase records from Polar that may include customer ID, customer name, customer email, product ID, plan, order ID, subscription ID, benefit grant ID, license key ID, displayed license key, subscription status, term dates, refund status, and related metadata. We do not intentionally store full payment card numbers on Chart Kit systems.
License certificate information
The current license service processes Polar webhooks and creates local license certificate records. Those records may include customer name, customer email, Polar customer ID, product ID, plan, order ID, subscription ID, benefit grant ID, license key ID, displayed license key, license status, term start, term end, certificate ID, certificate storage key, certificate sent timestamp, source order ID, certificate revision, last email message ID, last Polar event ID, metadata JSON, reconciliation timestamp, created timestamp, and updated timestamp.
The license service also stores Polar webhook delivery state in D1, including event ID, event type, received timestamp, webhook payload JSON, processing status, processed timestamp, error message, and retry count. Generated license certificate PDFs are stored in Cloudflare R2 and may be emailed to the purchaser.
No current in-app license telemetry
The current implementation does not collect app identifiers, domains, package versions, production runtime events, or in-app license validation telemetry from applications using Chart Kit Pro. If we add license validation or telemetry later, we will update this policy before relying on that new collection.
Website analytics and logs
ChartKit.io uses Google Analytics, which may collect or receive page views, events, browser and device details, referrers, approximate location derived from IP address, cookie identifiers, and similar usage information. Cloudflare may process request metadata such as IP address, URL, user agent, timestamps, security signals, cache events, and routing details to deliver and secure the website and services.
How we use information
- Provide, operate, secure, debug, and improve Chart Kit websites, docs, checkout flows, license certificate services, and support.
- Process purchases, subscriptions, renewals, refunds, license certificates, and license status changes.
- Send transactional emails, including license certificates, setup details, receipts-related follow-up, support replies, and service notices.
- Respond to support, sales, privacy, and legal requests.
- Understand website usage, documentation engagement, and product demand.
- Prevent fraud, abuse, security incidents, unauthorized access, and license misuse.
- Maintain business records, enforce agreements, comply with law, and resolve disputes.
- Send future product or marketing communications if we add those channels and you have the required choice or consent.
Legal bases for EU and UK users
If European or UK data protection law applies, we rely on these legal bases:
- Contract: to provide paid products, licenses, checkout support, certificates, documentation, and support you request.
- Legitimate interests: to secure, operate, improve, and understand the services, prevent abuse, respond to business inquiries, and maintain records.
- Legal obligations: to maintain tax, accounting, compliance, refund, dispute, and legal records.
- Consent: where required for optional analytics, cookies, newsletters, or marketing communications.
How we disclose information
We disclose personal information only as needed for the services, business operations, compliance, and legal protection. Recipients may include:
- Cloudflare: hosting, CDN, Workers, D1, R2, Queues, email delivery, security, and operational logging.
- Polar: checkout, payments, customer records, subscriptions, tax, receipts, refunds, license keys, and related support.
- Google Analytics: website analytics and usage measurement.
- Communications providers: email delivery, inbound support mailboxes, and related message processing.
- Professional advisors: lawyers, accountants, auditors, insurers, and security advisors where needed.
- Authorities or legal process: when required by law or reasonably necessary to protect rights, safety, security, or the integrity of the services.
- Business transfers: in connection with a merger, acquisition, financing, restructuring, or sale of assets, subject to appropriate protections.
We do not currently sell personal information, run ads, or run retargeting. We do not intentionally disclose personal information for cross-context behavioral advertising.
Cookies and analytics choices
Google Analytics and related tags may use cookies or similar technologies when you visit ChartKit.io. You can control cookies through your browser, device, extensions, or network tools. Google also provides information about its privacy practices atpolicies.google.com/privacy.
If we add a consent banner or additional analytics controls, we will use those controls to apply available choices. If you block cookies or analytics scripts, some measurement features may not work, but core documentation should remain available.
If we later configure analytics or other tools for advertising, retargeting, or similar features, we will update this policy and provide legally required choices.
Retention
We keep information for as long as needed for the purposes described in this policy, unless a longer retention period is required or permitted by law. Current retention practices include:
| Record type | Retention |
|---|---|
| Purchase, subscription, refund, and license certificate records | Kept while Chart Kit or the related site/service exists, unless deletion is required by law and compatible with tax, accounting, dispute, and license-record obligations. |
| License service D1 records and Polar webhook event records | Kept while Chart Kit or the related site/service exists, because they support license status, certificate history, refunds, and customer support. |
| Generated license certificate PDFs | Kept while needed to provide certificates, prove license scope, support refunds or disputes, and maintain customer records. |
| Support, sales, legal, and privacy messages | Kept while Chart Kit or the related support system exists, unless deleted earlier after a valid request or operational cleanup. |
| Cloudflare operational logs and Google Analytics data | Kept according to the applicable Cloudflare and Google settings, service limits, and retention controls. |
International transfers
Berman Digital Ltd is based in Canada. Service providers such as Cloudflare, Polar, Google, and email infrastructure providers may process information in Canada, the United States, Europe, or other countries. Where required, we rely on appropriate legal mechanisms for cross-border transfers.
Security
We use technical and organizational safeguards designed to protect personal information, including reputable infrastructure providers, access controls, HTTPS, webhook verification, and operational monitoring. No system is perfectly secure. Please do not send payment card numbers, secrets, private keys, production credentials, or sensitive personal information through support unless we specifically request a secure transfer method.
Your rights and choices
Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or receive a copy of personal information. You may also have the right to withdraw consent, opt out of certain processing, or complain to a data protection authority.
California residents may have rights to know, access, correct, delete, limit certain uses, and opt out of sale or sharing of personal information. We do not currently sell personal information, run ads, or run retargeting. We do not intentionally disclose personal information for cross-context behavioral advertising.
To exercise rights, email[email protected]. We may need to verify your identity and the account, order, email address, or license record connected to the request. Some information may be retained where required or permitted for tax, accounting, security, dispute, license integrity, or legal reasons.
Children
Chart Kit is intended for developers and businesses. It is not directed to children under 16, and we do not knowingly collect personal information from children under 13. If you believe a child provided personal information to us, contact[email protected].
Marketing
We do not currently operate a newsletter or marketing email list. If we add product update or marketing emails, we will provide required consent and unsubscribe controls. Transactional messages, such as license certificates, support replies, purchase-related notices, and security notices, may still be sent when needed to provide the services.
Third-party links
The website and documentation may link to third-party sites, package registries, repositories, payment pages, and documentation. Their privacy practices are governed by their own policies. For example, Polar's privacy policy is available atpolar.sh/legal/privacy-policy, and Cloudflare's privacy policy is available atcloudflare.com/privacypolicy.
Changes
We may update this policy from time to time. The updated date above shows when the current version became effective. If we make material changes, we will take reasonable steps to notify users through the website, email, checkout flow, or another appropriate channel.